Blog
Repo readiness, execution governance, and AI agent notes.
Browse product notes, engineering notes, field notes, and release essays about contract-first onboarding, CI alignment, and agent-safe repository operations.
Pressure-testing Ota on Hasura: raw Kubernetes manifests and honest kubectl proof
How Ota 1.6.24 governed Hasura's raw Kubernetes manifests while keeping local kubectl rendering, Kubernetes API acceptance, and application readiness separate.
mise Resolves Tools. Ota Governs Repository Acceptance.
mise resolves repository tool environments. Ota governs the declared setup, canonical verification, safe execution, and bounded evidence required for a selected repo path to count as accepted.
AI Agent Contracts Cannot Define Repository Acceptance
An agent contract can govern how an AI changes code. It cannot by itself define the executable setup, verification, and evidence a repository needs for a change to count as accepted.
Testing the Proof System: Negative Controls and Dependency Evidence in Ota
How Ota separates dependency reachability, transaction-bound seam exercise, and validated negative controls without turning any red exit into causal proof.
Ota 1.6.24: Replayable Proof for Real Repository Execution
How Ota uses archived receipts, scoped baselines, input identity, and witnessed observations to distinguish a replay from a fresh derivation.
Why ok: true Is Not Enough for AI Agent Execution
How agents and CI should read Ota execution status, proof verdicts, scope, and not-proved boundaries without turning a narrow green into broad authorization.
Pressure-testing Ota on Open WebUI: proof cleanup ownership, bootstrap truth, and native vs Compose runtime boundaries
How Open WebUI forced Ota to tighten runtime-proof cleanup, keep CI bootstrap truth contract-owned, and distinguish host-owned native service teardown from Compose-owned runtime teardown.
Turning Ota Contracts into Merge-Gate Truth
How Ota turns contract-owned verification lanes into stable merge-check identities, CI drift findings, and an opt-in GitHub pull-request gate.